GOV-18
Quality Management System (QMS)
Description
Mechanisms exist to govern a Quality Management System (QMS) to ensure cybersecurity and data protection processes conform with applicable statutory, regulatory and/or contractual obligations.
Control Question
Does the organization govern a Quality Management System (QMS) to ensure cybersecurity and data protection processes conform with applicable statutory, regulatory and/or contractual obligations?
Control Metadata
Domain:
Cybersecurity & Data Protection Governance
Validation Cadence:
Annual